“Ubuntu Security Team” team

Subscribed bugs


1 → 75 of 994 results First • Previous • • Last
Critical
New
#340201 Null pointer dereference vulnerabilities in JamVM
gcc 256
Critical
Confirmed
#1068495 Firefox 16.0.1 Crash Report [@ unity_webapps_available_application_get_application_domain ]
Mozilla Firefox 260
Critical
New
#1098114 Anon remote HTTP access to jenkins cryptographic master key
jenkins (Ubuntu Precise) 260
Critical
In Progress
#1215092 please add support to run postinst-style code on first boot after upgrades
Ubuntu system image 8
Critical
Confirmed
#1410195 Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE
libpam-ldap (Ubuntu) 278
Critical
Confirmed
#1410195 Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE
libnss-ldap (Ubuntu) 278
High
Confirmed
#460925 Kernel log message corruption due to incomplete /proc separation
lxc (Ubuntu) 316
High
Confirmed
#516500 apt-cacher stops updates of random packages (Connection failed)
apt-cacher (Ubuntu) 278
High
Confirmed
#545134 Ubuntu Software Centre can not install packages behind authenticated http proxies when the user does not click on "apply systemwide"
software-center (Ubuntu) 150
High
Confirmed
#718670 authorisation not applied to submenus
grub2 (Ubuntu) 284
High
Confirmed
#829836 Password can be changed with only cookie authentication
Canonical SSO provider 284
High
Confirmed
#867651 sql queries not properly escaped
Music Lens 264
High
New
#975452 add preliminary documentation to maas with note on trusted network
Release Notes for Ubuntu precise 8
High
New
#994037 Multislot meeting is showing up in two different time slots on the by track page
Summit 8
High
Confirmed
#995709 lvm should not scan the entire /dev tree by default
lvm2 (Ubuntu) 276
High
Confirmed
#1036985 denial of service of too many headers in response
tinyproxy 262
High
New
#1098135 Multiple security issues in Jenkins
jenkins (Ubuntu Precise) 258
High
New
#1098135 Multiple security issues in Jenkins
jenkins-winstone (Ubuntu Precise) 258
High
Confirmed
#1176127 GLib Application Registers a DBus name under application confinement
glib2.0 (Ubuntu) 16
High
Confirmed
#1197134 All SDK applications require access to /dev/binder
apparmor-easyprof-ubuntu (Ubuntu) 18
High
Confirmed
#1197134 All SDK applications require access to /dev/binder
lxc-android-config (Ubuntu) 18
High
Confirmed
#1352978 Ensure that TrustStorePermissionManager is not subject to PID races
location-service (Ubuntu) 8
High
In Progress
#1358294 App data and config files are not removed when an app is uninstalled
click (Ubuntu) 130
High
In Progress
#1444656 GnuTLS TLS 1.2 handshake failure
gnutls26 (Ubuntu Trusty) 64
High
Confirmed
#1358294 App data and config files are not removed when an app is uninstalled
Canonical System Image 130
High
Confirmed
#1529276 Local keyboard layout is selected only after entering full system encryption key
ubiquity (Ubuntu) 284
High
New
#1493303 [OSSA 2016-004] Swift proxy memory leak on unfinished read (CVE-2016-0738)
swift (Ubuntu Trusty) 288
High
Confirmed
#1615842 No way to report malicious applications
Developer registration portal 22
High
Confirmed
#1628289 snapd should depend on squashfuse (for use in containers)
squashfuse (Ubuntu) 66
High
Confirmed
#1664910 linux-lts-xenial 4.4.0-63.84~14.04.2 ADT test failure with linux-lts-xenial 4.4.0-63.84~14.04.2
linux-lts-xenial (Ubuntu) 8
High
Confirmed
#1529276 Local keyboard layout is selected only after entering full system encryption key
ubiquity (Ubuntu Xenial) 284
High
Confirmed
#1529276 Local keyboard layout is selected only after entering full system encryption key
ubiquity (Ubuntu Zesty) 284
High
Confirmed
#1529276 Local keyboard layout is selected only after entering full system encryption key
ubiquity (Ubuntu Yakkety) 284
High
New
#1698180 [CVE] Send Later with Delay bypasses OpenPGP
kdepim (Ubuntu Trusty) 270
High
New
#1698180 [CVE] Send Later with Delay bypasses OpenPGP
kdepim (Ubuntu Zesty) 270
High
New
#1698180 [CVE] Send Later with Delay bypasses OpenPGP
kdepim (Ubuntu Xenial) 270
High
In Progress
#1721223 Networkd fail to set ip address between leases if ip address changes on UbuntuCore
systemd (Ubuntu Artful) 14
Medium
Confirmed
#357187 Revoked subkeys not appearing as revoked
seahorse 260
Medium
Confirmed
#355005 Malicious executable code defaults to "Open with", cannot be changed
Mozilla Firefox 278
Medium
In Progress
#375371 MySQL must not use /tmp
mysql-dfsg-5.1 (Ubuntu) 280
Medium
Confirmed
#419929 Attachments added by a hook become public when bug is marked as a duplicate by retracer
apport (Ubuntu) 268
Medium
Confirmed
#461398 domain user name and password visable to all
apt-setup (Ubuntu) 260
Medium
Confirmed
#479408 Password-protected smb:// URLs are displayed in Nautilus browser address bar with inline plain-text password
gnome-vfs (Ubuntu) 258
Medium
Confirmed
#375371 MySQL must not use /tmp
Ubuntu Server papercuts 280
Medium
Confirmed
#630226 policykit password dialog should grab keyboard
policykit-1-gnome (Ubuntu) 264
Medium
Confirmed
#702204 USB key encrypted password setting not sticky
gnome-keyring (Ubuntu) 260
Medium
Confirmed
#717412 NX-emulation ASLR is predictable
linux (Ubuntu) 260
Medium
Confirmed
#720401 LDAP session created with no password required
nss-pam-ldapd (Ubuntu) 266
Medium
Confirmed
#730410 CVE-2011-1140 Wireshark: Multiple stack consumption vulnerabilities caused DoS via crafted SMB or CLDAP packet
wireshark (Ubuntu) 340
Medium
Confirmed
#757730 CVE-2011-1491
roundcube (Ubuntu) 260
Medium
Confirmed
#757736 CVE-2011-1492 request verification problem
roundcube (Ubuntu) 258
Medium
New
#787990 Kopete OTR leaks unencrypted messages
KDE Network 260
Medium
Confirmed
#793582 liblua5.1-expat0 vulnerable to "billion laughs" attack?
lua-expat (Ubuntu) 268
Medium
Confirmed
#798438 rekonq is still vulnerable to CSS history fishing.
rekonq 258
Medium
Confirmed
#832695 Shibboleth Security Advisory [25 July 2011]
opensaml (Ubuntu) 258
Medium
Confirmed
#859665 apt-get source does not download the correct version
apt (Ubuntu) 20
Medium
Confirmed
#880909 bypass access restrictions for some commands
cyrus-imapd-2.2 (Ubuntu) 262
Medium
Confirmed
#880909 bypass access restrictions for some commands
cyrus-imapd-2.2 (Ubuntu Precise) 262
Medium
Confirmed
#880909 bypass access restrictions for some commands
kolab-cyrus-imapd (Ubuntu) 262
Medium
Confirmed
#880909 bypass access restrictions for some commands
kolab-cyrus-imapd (Ubuntu Precise) 262
Medium
Confirmed
#916153 libcgroup1 security issues
libcgroup (Ubuntu) 258
Medium
Confirmed
#918293 nepomukservicestub crashed with SIGABRT in __libc_message()
kde-runtime (Ubuntu) 32
Medium
Confirmed
#967021 yelp crashed with SIGSEGV in process_check_file()
yelp (Ubuntu) 18
Medium
Confirmed
#970929 hwclock reports the wrong time for the timezone it states
util-linux (Ubuntu) 258
Medium
Confirmed
#982017 mission-control-5 crashed with SIGSEGV in on_connection_filter()
telepathy-mission-control-5 (Ubuntu) 20
Medium
Confirmed
#983810 libxml2 security update fails to address problem and breaks thread-safety
libxml2 260
Medium
Confirmed
#988445 seahorse-nautilus encrypts using other key pair w/o instruction to do so
seahorse-nautilus (Ubuntu) 258
Medium
Confirmed
#990949 Editor scrolls down after editing and saving a tex file
gedit-latex-plugin (Ubuntu) 210
Medium
Confirmed
#988445 seahorse-nautilus encrypts using other key pair w/o instruction to do so
seahorse 258
Medium
New
#1001002 CVE-2010-2525
linux-armadaxp (Ubuntu Precise) 258
Medium
Confirmed
#642855 Insecure use of temp files
flash-kernel (Ubuntu Precise) 282
Medium
Confirmed
#1018204 <chromium-browser-20.0.1132.43: multiple vulnerabilities (CVE-2012-{2807,2815,2817,2818,2819,2820,2821,2823,2824,2825,2826,2829,2830,2831,2834})
libxml2 (Fedora) 262
Medium
Confirmed
#1077981 udev rules from persistent usb-stick leak to installs
ubiquity (Ubuntu) 16
Medium
Confirmed
#1196265 Multiple Format String Vulnerabilities in yardradius
yardradius (Ubuntu) 258
Medium
New
#1215282 Possible puppet performance regression with 2.7.11-1ubuntu2.4
puppet (Ubuntu) 14
1 → 75 of 994 results First • Previous • • Last